Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/2aq99iD6SnuS6aqoX2jgdW1i9bI.roa
File: 2aq99iD6SnuS6aqoX2jgdW1i9bI.roa (raw, json)
Hash identifier: 6H4V3lg0SY9GaeLvR77SgDUst+3ccSo6uNFZgLLc7QA=
Subject key identifier: D9:AA:BD:F6:20:FA:4A:7B:92:E9:AA:A8:5F:68:E0:75:6D:62:F5:B2
Certificate issuer: /CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Certificate serial: 0BBFBB8F
Authority key identifier: 2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/2aq99iD6SnuS6aqoX2jgdW1i9bI.roa
Signing time: Thu 17 Mar 2022 22:41:54 +0000
ROA not before: Thu 17 Mar 2022 22:41:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203713
IP address blocks: 185.153.76.0/22 maxlen: 24
2a06:9880::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197114767 (0xbbfbb8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Validity
Not Before: Mar 17 22:41:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9aabdf620fa4a7b92e9aaa85f68e0756d62f5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:61:40:b8:e3:37:cb:6d:a9:c3:a5:b9:28:82:
5c:9f:92:29:22:7c:8d:53:92:51:91:5b:f4:61:6e:
3f:91:23:88:0d:3f:b3:20:ca:5e:d9:31:8d:0c:9a:
bd:df:77:af:14:25:0e:cb:15:ef:1d:ec:c2:4b:f7:
9b:9f:f0:81:3b:12:97:d9:8d:17:dc:94:bf:ba:19:
53:d3:48:25:26:27:ca:8d:d9:70:10:f2:83:61:6e:
38:10:86:64:ad:4f:e2:f0:26:a8:f1:22:7e:64:e5:
87:f8:b0:d3:00:46:e4:6e:c3:9f:2f:1a:7f:f2:af:
4f:ad:19:89:e3:88:b0:ea:80:a6:bd:18:4d:ed:34:
a6:09:b2:73:d3:3b:c3:53:fc:38:52:18:1c:f5:99:
fb:c0:44:32:3d:d3:fa:49:af:dc:25:73:38:a5:92:
08:3f:2e:67:14:01:f5:67:d3:65:c2:52:87:a8:11:
0a:6a:bc:6a:ef:d3:52:32:74:31:24:5c:aa:37:18:
e7:57:30:f7:5f:2e:86:d6:66:02:65:7a:c6:4c:55:
60:77:dc:27:89:ef:87:5b:c8:60:d6:a7:00:ea:9e:
35:05:18:5a:cd:9a:b0:fa:6e:c0:1b:40:e6:14:d4:
92:2d:59:f1:e0:55:dd:21:8d:b0:b5:34:45:dc:6c:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AA:BD:F6:20:FA:4A:7B:92:E9:AA:A8:5F:68:E0:75:6D:62:F5:B2
X509v3 Authority Key Identifier:
keyid:2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/2aq99iD6SnuS6aqoX2jgdW1i9bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.76.0/22
IPv6:
2a06:9880::/29
Signature Algorithm: sha256WithRSAEncryption
c5:d8:95:b0:ea:b6:c5:80:de:ac:51:8b:98:9e:e2:b2:f4:f3:
72:c6:0f:1a:44:e3:8b:96:06:e0:2e:8b:63:ab:c0:41:46:6d:
97:48:68:78:45:d8:49:92:dd:84:88:c1:59:8d:53:c3:70:ee:
81:38:ca:d5:67:29:7c:2c:30:a0:c4:1e:df:5d:d9:a6:c2:30:
c6:a5:40:b4:9a:55:19:13:f9:dc:2c:ab:77:cc:9e:95:05:1f:
07:c2:22:b1:3a:d7:09:45:f1:6b:73:28:d3:20:59:1b:1a:49:
56:de:31:d9:3a:69:db:74:75:89:41:de:e1:2b:6e:52:9c:95:
75:52:8f:99:dd:20:3e:f2:0d:17:ff:ee:55:45:68:69:63:32:
b1:8d:f9:a8:56:b5:9a:ba:5e:e7:6a:f1:c6:12:75:45:ac:a3:
ad:cb:d7:c6:7b:4c:21:c9:77:eb:ae:2f:e4:fc:05:98:e6:5e:
28:24:4d:44:00:33:3c:f0:77:08:c4:d2:7c:c1:87:c7:17:c4:
c9:17:06:37:43:ae:e5:5c:23:e7:e0:09:bf:e4:20:2a:8b:9a:
90:35:27:09:13:2b:c7:14:0f:ba:00:94:cc:f7:b9:5d:01:c0:
e8:01:8e:a1:cb:92:21:73:30:2a:78:40:06:d9:70:51:6c:85:
4b:ad:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:52 2025 by rpki-client